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(54) System and method for performing an on-line transaction using a single-use payment 
instrument 

(57) A system and method for performing an on-line 
transaction, such as making a payment, with a singie- 
use payment instrument makes use of computer hard- 
ware and software, such as the computing device of a 
customer, the customer's bank's home banking server, 
the bank's card authorization server, a vendor's website 
server, and the vendor's credit card acquirer, coupled to 
one another over a network. The customer is issued a 
single use payment instrument through the bank, the 
bank debits an account nominated by the customer for 
the requested value of the payment instrument and may 
also specify an expiry for the payment instrument. The 
customer is able to nominate a particular source of 
funds for each transaction from among various 
accounts of the customer. The payment instrument set- 
tles and clears through existing credit card payment 
mechanisms without a need for special accommodation 
with the Internet vendor. 




RG. 1 



Q. 
LU 



Printed by Xerox (UK) Business Services 
2.16.7 (HRSJ/3.6 



1 



EP 1 077 436 A2 



2 



Description 

Cross Reference to Related Application 

[0001] This application claims the benefit of appli- 5 
canfs co-pending application having US. Serial No. 
60/149,874 filed August 19, 1999, incorporated herein 
by this reference. 

Field of the Invention w 

[0002] the present invention relates generally to 
the field of electronic commerce and more particularly 
to a system and method for performing an on-line trans- 
action, such as making a payment, with a single-use is 
payment instrument. 

Background of the Invention 

[0003] Currently, there is an element of customer 
uncertainty in making payments to merchants on the 
Internet. It is not always clear to an end user whether 
the customer's connection is secure. Further, the cus- 
tomer relies very much on visual means conveyed by 
the web browser that the customer is using and on 
pages of information that confirm certificate numbers 
that are used for encryption. Neither is it always clear to 
the customer whether that information is indeed accu- 
rate or correct or actually coming from the browser or 
from somebody who is trying to trick the customer. 
[0004] Aside from Internet communication security, 
there is also the concern that the website with which the 
customer is communicating is not, in fact, who it pur- 
ports to be. The customer may not even be aware of the 
entity with which the customer is dealing. For example, 
the customer finds a site where the customer wants to 
buy something, but the customer is not sure whether it 
is a merchant of whom the customer has heard. The 
customer is not sure whether the merchant is actually 
valid and above-board. 

[0005] In any event, there is a perceived risk to the 
customer in using credit card information to pay for 
goods and services over the Internet The customer's 
credit card information is of some value and can cause 
a financial loss as well as considerable inconvenience 
to the customer if it is captured by a third party with ill 
intentions. 

[0006] On the merchant's side of the transaction, 
there is a real financial risk that if a credit card is used 
fraudulently, settlement may be withheld or revoked by 
the card issuer upon receipt of a customer dispute. As 
more goods, such as software, music, electronic books, 
and the like are purchased over the Internet with no 
physical delivery and hence no address involved, the 
opportunities for such fraud increase. 



Summary of the Invention 

[0007] It is a feature and advantage of the present 
invention to provide a system and method for perform- 
ing an on-line transaction that enables an Internet cus- 
tomer, such as an Internet customer making a 
purchase, to pay for goods and/or services on the web 
without having to worry about the customer's credit card 
information getting into the wrong hands. 
[0008] It is another feature and advantage of the 
present invention to provide a system and method for 
performing an on-line transaction that provides a user, 
such as an Internet purchaser, with a unique payment 
token to pay for goods and/or services on the web but 
which is useless to any unauthorized person. 
[0009] It is an additional feature and advantage of 
the present invention to provide a system and method 
for performing an on-line transaction with a single-use 
payment instrument that affords the customer all the 
protection available to the customer when the customer 
makes use of a credit card or debit card. 
[0010] It is a further feature and advantage of the 
present invention to provide a system and method for 
performing an on-line transaction with a single-use pay- 
ment instrument that removes any concern of the cus- 
tomer about security of the customer's connection or 
the integrity of the website with which the customer 
makes the transaction. 

[001 1 ] It is a further feature and advantage of the 
present invention to provide a system and method for 
performing an online transaction that allows merchants 
the option to identify the token as a single-use instru- 
ment based on a characteristic range of numbers and 
either offer preferential terms on such transactions or 
impose limits or referrals on those who do not use such 
an instrument 

[0012] To achieve the stated and other features, 
advantages and objects, an embodiment of the present 
invention provides a customer, such as an Internet pur- 
chaser, a one-off, single-use payment token or instru- 
ment that will still settle and clear, through existing credit 
card payment mechanisms. There is no need for special 
accommodation with the Internet vendor in order for the 
customer to take advantage of this instrument Any ven- 
dor that is set up to accept credit card transactions by 
the input of a credit card number and a card expiration 
date can also be provided with the one-off payment 
instrument for an embodiment of the present invention, 
that would then, as far as that vendor is concerned, set- 
tle through the usual credit card channels. The card 
expiration date is the month/year card expiration date 
which a customer must provide in a standard credit card 
transaction. An embodiment of the present invention uti- 
lizes a card expiration date which is fabricated, because 
there is no real card involved. 

[0013] An embodiment of the present invention 
makes use of computer hardware and software, such as 
the computing device of a customer, which can be the 
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customer's personal computer (PC), the customer's 
bank's home banking server, the bank's card authoriza- 
tion server, a vendor's website server, and the vendor's 
credit card acquirer, coupled to one another over a net- 
work, which can be a global network, such as the Inter- 
net. The system and method for an embodiment of the 
present invention enables the customer to perform an 
on-line transaction with a vendor using the single-use 
payment instrument, for example, by entering details of 
the on-line transaction at the customer's PC coupled to 
the customer's bank's home banking server over the 
network. The transaction details include, for example, a 
payment amount for the transaction, which is received 
by the home banking server from the computing device 
of the customer over the network. 
[0014] In an embodiment of the present invention, 
upon receiving the details for the on-line transaction 
with the vendor from the customer, the customer is 
prompted by the home banking server to enter a selec- 
tion for a source of funds for the transaction from a plu- 
rality of nomination options, such as a credit card 
account, a checking account, or a savings account The 
home banking server receives the customer's nomina- 
tion of the source of funds for the transaction from the 
customer's computing device over the network. The 
home banking server verifies an availability of funds for 
the payment amount for the transaction in the nomi- 
nated source of funds and reserves funds sufficient for 
the payment amount in the nominated source of funds. 
In an aspect of an embodiment of the present invention, 
the funds can be reserved for a predetermined expiry 
period. The predetermined expiry period, as distin- 
guished from the fabricated card expiration date, is typ- 
ically a short period of hours or days for which the 
payment instrument is valid, but it is not provided to the 
customer to use in the transaction. 
[0015] In addition, in an embodiment of the present 
invention, the home banking server generates details of 
a payment instrument for the transaction corresponding 
to the transaction details, such as the payment amount 
for the transaction and a unique identification number 
for the transaction. Further, the transaction details gen- 
erated by the home banking server can include a prede- 
termined expiry for the payment instrument. In addition, 
the identification number can have an embedded bank 
identification number for routing the request for authori- 
zation to an appropriate authorization server, and the 
identification number can be generated from a charac- 
teristic range of numbers identifiable by a web site 
server of the vendor as offering superior authentication. 
A record of the payment instrument details is stored by 
the home banking server in a database of one or both of 
the home banking server and a credit card authorization 
server of the bank. The home banking server also pro- 
vides the payment instrument details to the customer at 
the customer's computing device over the network for 
use by the customer in the transaction with the vendor. 
[0016] In an embodiment of the present invention, 



the customer at the customer's computing device sends 
the payment instrument details over the network to the 
vendor's website server to pay for the transaction with 
the vendor. The vendor's website server presents the 

5 payment instrument details to the vendor's credit card 
acquirer service. In turn, the vendor's credit card 
acquirer service presents the payment instrument 
details to the bank's credit card authorization server for 
authorization. Upon receiving the request for authoriza- 

70 tion of the transaction, for the customer by the bank's 
credit card authorization server, if the request for 
authorization according to the payment instrument 
details corresponds to the stored record of the payment 
instrument details, the authorization server sends an 

75 authorization for the transaction for the customer via the 
vendor's credit card acquirer service to the vendor's 
website server. 

[0017] If the payment instrument details for an 
embodiment of the present invention include the prede- 

20 termined expiry for the payment instrument, the trans- 
action is authorized by the credit card authorization 
server if the request for authorization is received within 
the predetermined expiry of the payment instrument. 
The banking server also debits the nominated source of 

25 funds for the payment amount and removes the stored 
record of the payment. Thus, an embodiment of the 
present invention provides a method and system by 
which an Internet customer is issued a one-off, single 
use payment token or instrument, through a bank with 

30 whom he or she maintains a checking or credit account. 
The bank debits the customer's checking or credit card 
account for the requested value of the token or instru- 
ment which depends on the cost of the product or serv- 
ice which is the subject of a proposed transaction. The 

35 bank may also specify a transaction period during which 
the token or instrument is valid and not valid at any other 
times. 

[0018] The single-use payment token or instrument 
for an embodiment of the present invention is distin- 

40 guished from a debit or credit card-like instrument in 
that the customer is able to choose the source of the 
money for each transaction from among various 
accounts of the customer. Thus, the customer is able to 
nominate a particular source of funds for a particular 

45 transaction, the nominated source is checked for availa- 
bility of credit or funds, and the funds are earmarked to 
be reserved for the same period as the expiry of the 
token or instrument. There is no need for special 
accommodation with Internet vendors in order for cus- 

50 tomers to take advantage of the instrument. Any vendor 
that is set up to accept credit card transactions by the 
input of a credit card number and a card expiration date 
can also be provided with the one-off payment instru- 
ment, that would then, as far as that vendor is con- 

55 cerned, settle through the usual credit card channels. 
[0019] Additional objects, advantages and novel 
features of the invention will be set forth in the descrip- 
tion which follows, and in part will become more appar- 
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ent to those skilled in the art upon examination of the 
following, or may be learned by practice of the invention. 

Brief Description of the Drawings 
[0020] 

Fig. 1 is a schematic diagram which illustrates an 
example overview of key components and the flow 
of information between the key components for an 
embodiment of the present invention; 
Fig. 2 is a schematic diagram which illustrates an 
example overview of key components and the flow 
of information between the key components for an 
alternate embodiment of the present invention; 
Fig. 3 is a flow chart which illustrates an example of 
the process of the customer performing an on-line 
transaction using the single-use payment instru- 
ment for an embodiment of the present invention. 

Detailed Description 

[0021] Referring now in detail to an embodiment of 
the present invention, an example of which is illustrated 
in the accompanying attachments, Fig. 1 is a schematic 
diagram which illustrates an example overview of key 
components and the flow of information between the 
key components for an embodiment of the present 
invention. Referring to Fig. 1, an embodiment of the 
present invention involves a number of computer hard- 
ware and software components, such as the computing 
device 10 of a customer 12, the customer's bank's 
home banking server 14, the bank's card authorization 
server 1 6, a vendor's website server 1 8, and the ven- 
dor's credit card acquirer 20, coupled to one another 
over a network, such as the Internet 22. 
[0022] The system and method for an embodiment 
of the present invention enables the customer 12 to 
make a payment token good only for a single Internet 
transaction. In order to do that, before the customer 12 
makes a purchase, the customer 1 2 signs on to the cus- 
tomer's preferred home banking system 14, such as Cit- 
ibank's DIRECT ACCESS system, using the customer's 
personal computer (PC) 10. The customer 12 signs on 
to the home banking system 14 in exactly the same way 
in which the customer 12 normally accesses the home 
banking system 14 over the Internet 22. 
[0023] In an embodiment of the present invention, 
the customer 12 signs on to the home banking system 
14, and fills in a very brief couple of fields of information 
explaining the transaction and, most importantly, the 
amount, in response to prompts by the system 14 for the 
information. The system for an embodiment of the 
present invention includes, for example, application 
software that then creates a temporary credit card 
number and expiry date. The expiry date is the one 
other piece of information that is known to be submitted 
in the typical credit card authorization. The system for 



an embodiment of the present invention makes a unique 
combination of a card number and expiry date and pro- 
vides that to the customer 12 for use for the purchase, 
for example, via the vendor's website server 18. 

5 [0024] The system software for an embodiment of 
the present invention then creates the necessary record 
for the particular transaction to be authorized. However, 
unlike a normal credit card where any valid transaction 
subject to balance verification can be authorized, an 

w embodiment of the present invention creates a single- 
use payment instrument which exists only for the dura- 
tion of, and specifically for, that single transaction. 
Therefore, any other authorization request which comes 
into the system with those details for a different amount 

15 are rejected. The customer 12 then proceeds back to 
(or to) the vendor's Internet website 1 8 and enters that 
information just as the customer 12 would enter a credit 
card number and its expiry date at whatever point that 
the vendor's system 18 asks for the customer's credit 

20 card information. 

[0025] In an embodiment of the present invention, 
once the particular transaction item has been approved 
for the amount of which the customer 12 advised the 
vendor's website server 1 8 and the bank's home bank- 

25 ing server 14, it too is removed from any authority, so it 
would only work once. The result of that is that anyone 
else who may come into possession of that particular 
piece of information will not be successful if they 
attempt to use it to perform any other transaction what- 

30 soever. Accordingly, if the vendor to whose website 
server 18 the customer's PC 1 0 is connected is actually 
acting criminally and is only gathering the information to 
try and use it elsewhere, while it will work for the trans- 
action about which the customer 12 gave information to 

35 the customer's bank's home banking server 14, "it can- 
not be subsequently authorized. It essentially repre- 
sents a non-existent bank card, and it is of no use to 
anyone else. 

[0026] The system and method for an embodiment 

40 of the present invention protects both the bank, as well 
as the customer 12, from anyone taking that information 
while it is in transit, encryption discussions notwith- 
standing, or while it is stored on the vendor's computer 
system 18 and using it for fraudulent purposes. The 

45 vendor benefits from being able to transact with a wider 
base of confident customers. And, if the vendor 
chooses to do so, the vendor's website server 1 8 can be 
configured to recognize the type of instrument being 
used by characteristic range of numbers and permit 

so more preferential terms higher value transactions for 
such payments on the basis of their superior authentic- 
ity. The customer does not have to be concerned that 
the Internet connection is secure. AH that the customer 
12 has provided to the bank is the customer's identffica- 

55 tion to the bank's home banking system 14, but that 
information is of no use to anyone else who attempts to 
present it to a merchant. In other words, the only "item of 
information being transferred across the network 22 is 
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the temporary, short-lived, single-use payment instru- 
ment that is created. 

[0027] An additional aspect of an embodiment of 
the present invention is that the application of the bank's 
home banking server 14 that creates the token is able to 
access the database of the bank's credit card authoriza- 
tion server 16 used.for credit card authorization on-line. 
That application creates the necessary records for the 
single-use, temporary payment instrument, examines 
incoming authorization requests for that particular 
instrument from the vendor's credit card acquirer 20, 
verifies that the amount corresponds with the transac- 
tion of which the customer 12 advised the bank, and 
authorizes the appropriate transaction, while rejecting 
any others. In addition, the application also deans up 
that database and removes records referring to that 
instrument once the transaction has been concluded or 
has expired, as it is not a real credit card, and is also 
subject to a predetermined expiry. In other words, the 
customer 12 is told that this payment authorization 
token can be used for a predetermined period of time, 
after which it will become useless in and of itself, and 
the customer 1 2 will have to come and get another one. 
[0028] In terms of financial settlement from that 
point on, in an embodiment of the present invention, the 
customer 12 is debited through whatever mechanism 
the customer 12 chooses. For example, the bank can 
take the money from a credit card or from a checking 
account or from some other account designated by the 
customer 1 2. The vendor, assuming that the vendor is 
indeed valid, can present that transaction just as it 
would any other credit card transaction, and it is settled 
through the normal channels. Thus, there is no actual 
sign-up necessary for the customer 12. The customer 
12 merely needs to identify himself or herself to the 
bank's home banking server 1 4, in order to authorize 
the issuance of the transaction token and to authorize 
the bank to debit the customer's account. 
[0029] In an embodiment of the present invention, 
the bank knows which account of the customer 12 to 
debit by the customer 12 providing that information 
when the customer 12 requests the token. Alternatively, 
the bank can default to the customer's main transac- 
tional account that is associated with the profile under 
which the customer 1 2 logged on to the home banking 
system 1 4. However, it is likely to be more convenient 
for the customer 12 to be able to choose from where to 
get the money. In that sense, the single-use payment 
instrument is not necessarily characterized as a debit 
card- like instrument or a credit card-like instrument. 
[0030] In an embodiment of the present Invention, 
the way in which the home banking system 14 works is 
that one or more customer accounts, such as credit 
card accounts, checking accounts, and savings 
accounts, are linked to the customer's profile. Thus, the 
customer 12 is able to nominate a particular source for 
the funds for a transaction or set a preference for the 
bank to default to a particular means to save the cus- 



tomer 12 from entering it each time. In addition, since 
this is an on-line system capable of doing so, the cus- 
tomer's nominated source of funds is checked, as is the 
case with someone presenting a debit card or credit 

5 card, and the funds are earmarked to be reserved for 
the same period of time as the expiry of the token. 
[0031] Referring again to Fig. 1 , in an embodiment 
of the present invention, the customer 12 at the cus- 
tomer's PC 10 accesses the vendor's website server 18 

to and the bank's home banking server 14 over the Inter- 
net 22. In turn, the bank's home banking server 14 is 
coupled to the credit card authorization server 16, which 
is updated with the one-off occurrence for an embodi- 
ment of the present invention. The application for an 

15 embodiment of the present invention resides, for exam- 
ple, on the home banking server 14 and the credit card 
authorization server 16. Graphical user interface (GUI) 
screens are presented for the customer 12 on the cus- 
tomer's PC 10 through the customer's browser. 

20 [0032] Fig. 2 is a schematic diagram which illus- 
trates an example overview of key components and the 
flow of information between the key components for an 
alternate embodiment of the present invention. Refer- 
ring to Fig. 2, the arrangement is similar to that illus- 

25 trated in Fig. 1 except, for example, not using the 
Internet 22, the vendor's website server 1 8 "itself con- 
nects to the vendor's credit card acquirer service pro- 
vider 20 which, in turn, queries the authorization system 
16 back on the bank's side via private networks or 

30 leased lines. Thus, as far as the customer 12 is con- 
cerned, the customer 12 communicates strictly with the 
website server 18, and the website server 18 uses 
whatever means it currently has to authorize the credit 
card transaction, which may or may not involve further 

35 communication over the Internet 22. 

[0033] Fig. 3 is a flow chart which illustrates an 
example of the process of the customer 12 performing 
an on-line transaction using the single-use payment 
instrument for an embodiment of the present invention. 

40 Referring to Fig. 3, at S1, the customer 12 at the cus- 
tomer's PC 1 0 accesses the vendor's website server 1 8 
over the Internet 22 and chooses to make a purchase 
from the vendor. At S2, the customer 12 accesses the 
bank's home banking server 14 and provides transac- 
ts tion details in response to prompts. At S3, the bank's 
home banking server 14 creates the necessary pay- 
ment instrument records based on the transaction 
details and provides the instrument details to the cus- 
tomer 1 2. 

so [0034] Referring further to Fig. 3 for an embodiment 
of the present invention, at S4, the customer 12 pro- 
vides the instrument details to the vendor's website 
server 1 8 to make the purchase from the vendor. At S5, 
the vendor's website server 18 presents the instrument 

55 details to its credit card acquirer service 20 for authori- 
zation. At S6, the acquirer service 20 presents the 
details to the bank's credit card authorization server 16 
for authorization. At S7, the bank's authorization server 
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16 verifies the amount, authorizes the transaction and 
removes the records. At S8, the vendor's acquirer serv- 
ice 20 confirms authorization to the vendor's website 
server 18 and initiates settlement. At S9, the vendor's 
website server 18 confirms the purchase to the cus- 5 2. 
tomer 12 at the customer's PC 10. 
[0035] Referring again to Figs. 1 and 2, an impor- 
tant aspect of an embodiment of the present invention is 
some connection between the vendor's website server 3. 
18 and the vendor's card acquirer service 20. When a 10 
vendor starts accepting credit cards for payment for 
goods, the vendor has a relationship, for example, with 
the vendor's bank, which actually provides the service 4.\ 
of getting authorization for card transactions and getting 
the settlement paid to the vendor's account. Therefore, is 
the vendor has some type of mechanism to pass the 
card information that the customer 12 sends to the ven- 
dor's website server 1 8 on to the vendor's acquirer serv- 5. 
ice 20. In turn, the acquirer service 20 presents that 
information to the customer's bank's credit card author- 20 
ization server 16. In an embodiment of the present 
invention, the customer's bank's credit card authoriza- 
tion server 1 6 is also modified per the invention to see a 
transaction according to the present invention arrive 6. 
and to authorize the transaction as a perfectly valid 25 
credit card transaction. 

[0036] Various preferred embodiments of the inven- 
tion have been described in fulfillment of the various 
objects of the invention. It should be recognized that 7. 
these embodiments are merely illustrative of the princi- 30 
pies of the present invention. Numerous modifications 
and adaptations thereof will be readily apparent to those 
skilled in the art without departing from the spirit and 
scope of the present invention. 

35 

Claims 6. 

1 . A method for performing an on-line transaction with 
a vendor using a single-use payment instrument, 
comprising: 40 9. 

receiving details for the on-line transaction with 

the vendor from a customer; 

receiving a nomination of a source of funds for 

the transaction for the customer; 45 

verifying an availability of funds for a payment 10. 

amount for the transaction in the nominated 

source of funds; 

generating details of a payment instrument for 
the transaction corresponding to the transac- so 
tion details; 

storing a record of the payment instrument 11. 
details; 

providing the customer with the payment 
instrument details for use in the transaction 55 
with the vendor, 

receiving a request for authorization of the 
transaction for the customer according to the 12. 



payment instrument details; and 

authorizing the transaction with the vendor for 

the customer. 

The method of claim 1 , wherein receiving the trans- 
action details further comprises receiving informa- 
tion about a payment amount for the transaction. 

The method of claim 1 , wherein receiving the trans- 
action details further comprises receiving the trans- 
action details by a home banking server. 

The method of claim 3, wherein receiving the trans- 
action details further comprises receiving the trans- 
action details by the home banking server from a 
computing device of the customer over a network. 

The method of claim 4, wherein receiving the trans- 
action details further comprises receiving the trans- 
action details by the home banking server from the 
computing device of the customer over a global net- 
work. 

The method of claim 1 , wherein receiving the nom- 
ination further comprises receiving the nomination 
of the source of funds from among a plurality of 
nomination options. 

The method of claim 6, wherein receiving the nom- 
ination further comprises receiving the nomination 
of the source of funds from among the plurality of 
nomination options consisting of at least one of a 
credit card account, a checking account, and a sav- 
ings account 

The method of claim 1 , wherein receiving the nom- 
ination further comprises receiving the nomination 
of the source of funds by a home banking server. 

The method of claim 8, wherein receiving the nom- 
ination further comprises receiving the nomination 
of the source of funds by the home banking server 
from a computing device of the customer over a 
network. 

The method of claim 9, wherein receiving the nom- 
ination further comprises receiving the nomination 
of the source of funds by the home banking server 
from the computing device of the customer over a 
global network. 

The method of claim 1 , wherein verifying the availa- 
bility further comprises verifying the availability of 
funds for the transaction payment amount in the 
nominated source of funds by a home banking 
server. 

The method of claim 1 , wherein verifying the availa- 



6 



11 



EP 1 077 436 A2 



12 



bility further comprises reserving funds sufficient for 
the payment amount in the nominated source of 
funds. 

13.. The method of claim 12, wherein reserving the 
funds further comprises reserving the funds suffi- 
cient for the payment amount in the nominated 
source of funds for a predetermined expiry period. 

14. The method of claim 13, wherein reserving the 
funds further comprises reserving the funds suffi- 
cient for the payment amount in the nominated 
source of funds for the predetermined expiry period 
by a home banking server. 

15. The method of claim 1, wherein generating the 
details further comprises generating the details of 
the payment instrument specific to the transaction. 

16. The method of claim 15, wherein generating the 
details specific to the transaction further comprises 
generating the details of the payment instrument 
consisting of at least the payment amount for the 
transaction and a unique identification number for 
the transaction. 

17. The method of claim 16, wherein generating the 
details specific to the transaction further comprises 
generating details of the payment instrument con- 
sisting of a fabricated card expiration date. 

18. The method of claim 1, wherein generating the 
details further comprises generating the details of 
the payment instrument specific to the transaction 
by a home banking server. 

19. The method of claim 1, wherein storing the record 
further comprises storing the record of the payment 
instrument details consisting of at least the pay- 
ment amount for the payment instrument and a 
unique transaction identification number for the 
payment instrument. 

20. The method of claim 1 9, wherein storing the record 
further comprises storing the record of the payment 
instrument details including a fabricated card expi- 
ration date. 

21. The method of claim 20, wherein storing the record 
further comprises storing the record of the payment 
instrument details in a database. 

22. The method of claim 21, wherein storing the record 
further comprises storing the record of the payment 
instrument details in the database of at least one of 
a home banking server and a credit card authoriza- 
tion server 



23. The method of daim 1, wherein providing the cus- 
tomer with the payment instrument details further 
comprises providing the customer with the payment 
instrument details consisting of at least the pay- 

5 ment amount for the payment instrument and a 

unique transaction identification number for the 
payment instrument 

24. The method of claim 23, wherein providing the cus- 
10 tomer with the payment instrument details further 

comprises providing the customer with the payment 
instrument details including a fabricated card expi- 
ration date. 

15 25. The method of claim 24, wherein providing the cus- 
tomer with the payment instrument details further 
comprises providing the customer with the payment 
instrument details by a home banking server. 

20 26. The method of claim 25, wherein providing the cus- 
tomer with the payment instrument details further 
comprises providing the customer with the payment 
instrument details by the home banking server cou- 
pled to a computing device of the customer. 

25 

27. The method of claim 26, wherein providing the cus- 
tomer with the payment instrument details further 
comprises providing the customer with the payment 
instrument details by the home banking server cou- 

30 pled to the computing device of the customer over a 
network. 

28. The method of claim 27, wherein providing the cus- 
tomer with the payment instrument details further 

35 comprises providing the customer with the payment 
instrument details by the home banking server cou- 
pled to the computing device of the customer over a 
global network. 

40 29. The method of claim 1, wherein receiving the 
request for authorization further comprises receiv- 
ing the request for authorization according to the 
payment instrument details consisting of at least 
the payment amount for the payment instrument 

45 and a unique transaction identification number for 
the payment instrument. 

30. The method of claim 29, wherein receiving the 
request for authorization further comprises rece'rv- 

so ing the request for authorization according to the 
payment instrument details including a predeter- 
mined expiry for the payment instrument. 

31. The method of claim 30, wherein receiving the 
55 request for authorization further comprises receiv- 
ing the request for authorization by a credit card 
authorization server. 



7 



13 



EP 1 077 436 A2 



14 



32. The method of claim 31, wherein receiving the 
request for authorization further comprises receiv- 
ing the request for authorization by the credit card 
authorization server via a credit card acquirer serv- 
ice of the vendor; 5 

33. The method of claim 32, wherein receiving the 
request for authorization further comprises receiv- . 
ing the request for authorization by the credit card 
authorization server from a website server of the w 
vendor via the credit card acquirer service of the 
vendor. 

34. The method of claim 1, wherein authorizing the 
transaction further comprises authorizing the trans- 15 
action if the request for authorization according to 

the payment instrument details corresponds to the 
stored record of the payment instrument details. 

35. The method of claim 1, wherein authorizing the 20 
transaction further comprises authorizing the trans- 
action upon receiving the request for authorization 
before a predefined expiry of the payment instru- 
ment 

25 

36. The method of claim 1 , further comprising debiting 
the nominated source of funds for the payment 
amount 

37. The method of claim 1 , further comprising removing 30 
the stored record of payment instrument details. 

38. A system for performing an on-line transaction with 
a vendor using a single-use payment instrument, 
comprising: 35 

means for receiving details for the on-line 
transaction with the vendor from a customer; 
means for receiving a nomination of a source of 
funds for the transaction for the customer; 
means for verifying an availability of funds for a 
payment amount for the transaction in the nom- 
inated source of funds; 

means for generating details of a payment 
instrument for the transaction corresponding to 
the transaction details; 

means for storing a record of the payment 
instrument details; 

means for providing the customer with the pay- 
ment instrument details for use in the transac- 
tion with the vendor; 

means for receiving a request for authorization 
of the transaction for the customer according to 
the payment instrument details; and 
means for authorizing the transaction with the 
vendor for the customer. 

39. The system of claim 38, wherein the means for 



receiving the transaction details further comprises 
a home banking server. 

40. The system of claim 39, wherein the means for 
receiving the transaction details further comprises 
the home banking server coupled to a computing 
device of the customer over a network. 

41. The system of claim 40, wherein the means for 
receiving the transaction details further comprises 
the home banking server coupled to the computing 
device of the customer over a global network. 

42. The system of claim 38, wherein the means for 
receiving the nomination further comprises a home 
banking server. 

43. The system of claim 42, wherein means for receiv- 
ing the nomination further comprises the home 
banking server coupled to a computing device of 
the customer over a network. 

44. The system of claim 43, wherein the means for 
receiving the nomination further comprises the 
home banking server coupled to the computing 
device of the customer over a global network. 

45. The system of claim 38, wherein the means for ver- 
ifying the availability further comprises a home 
banking server. 

46. The system of daim 38, wherein the means for gen- 
erating the details further comprises a home bank- 
ing server. 

47. The system of claim 38, wherein the means for stor- 
ing the record further comprises a database. 

48. The system of claim 47, wherein the means for stor- 
ing the record further comprises the database of at 
least one of a home banking server and a credit 
card authorization server. 

49. The system of claim 38, wherein the means for pro- 
viding the customer with the payment instrument 
details further comprises a home banking server. 

50. The system of claim 49, wherein the means for pro- 
viding the customer with the payment instrument 
details further comprises the home banking server 
coupled to a computing device of the customer. 

51. The system of claim 50, wherein the means for pro- 
viding the customer with the payment instrument 
details further comprises the home banking server 
coupled to the computing device of the customer 
over a network. 
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52. The system of claim 51 , wherein the means for pro- 
viding the customer with the payment instrument 
details further comprises the home banking server 
coupled to the computing device of the customer 
over a global network. 

53. The system of claim 38, wherein the means for 
receiving the request for authorization further com- 
prises a credit card authorization server. 

54. The system of claim 53, wherein the means for 
receiving the request for authorization further com- 
prises the credit card authorization server coupled 
to a credit card acquirer service of the vendor. 

55. The system of daim 54, wherein the means for 
receiving the request for authorization further com- 
prises a website server of the vendor coupled to the 
credit card acquirer service of the vendor. 

56. A method for performing an on-line transaction with 
a vendor using a single-use payment instrument, 
comprising: 

receiving details for the on-line transaction with 

the vendor from a customer; 

receiving a nomination of a source of funds for 

the transaction for the customer; 

verifying an availability of funds for a payment 

amount for the transaction in the nominated 

source of funds; 

generating details of a payment instrument for 
the transaction specific to the transaction cor- 
responding to the transaction details and con- 
sisting of at least the payment amount for the 
transaction and a unique identification number 
for the transaction embedded with a bank iden- 
tification number for routing the request for 
authorization to an authorization server; 
storing a record of the payment instrument 
details; 

providing the customer with the payment 
instrument details for use in the transaction 
with the vendor; 

receiving a request for authorization of the 
transaction for the customer according to the 
payment instrument details; and 
authorizing the transaction with the vendor for 
the customer. 

57. A method for performing an on-line transaction with 
a vendor using a single-use payment instrument, 
comprising: 
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verifying an availability of funds for a payment 
amount for the transaction in the nominated 
source of funds; 

generating details of a payment instrument for 
the transaction specific to the transaction cor- 
responding to the transaction details and con- 
sisting of at least the payment amount for the 
transaction and a unique identification number 
for the transaction selected from a characteris- 
tic range of numbers identifiable by a web site 
server of the vendor as an authenticating 
number; 

storing a record of the payment instrument 
details; 

providing the customer with the payment 
instrument details for use in the transaction 
with the vendor; 

receiving a request for authorization of the 
transaction for the customer according to the 
payment instrument details; and 
authorizing the transaction with the vendor for 
the customer. 



receiving details for the on-line transaction with 
the vendor from a customer; 
receiving a nomination of a source of funds for 
the transaction for the customer; 
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The customer chooses to make a purchase from the vendor 
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The customer provides transaction details to the bank 
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The bank creates the necessary payment instrument records 



The bank provides the instrument details to customer 
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The customer makes their purchase using the instrument details 



The vendor presents the details to the bank for authorization 



The acquirer service presents the details to the bank for authorization 



The bank verifies the amount, authorizes the transaction and removes the records 



The acquirer service confirms authorization to the vendor and initiates settlement 



The vendor confirms the purchase to the customer 
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